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Abstract. A pair of points in a riemannian manifold M is secure if 
the geodesies between the points can be blocked by a finite number 
of point obstacles; otherwise the pair of points is insecure. A man- 
ifold is secure if all pairs of points in M are secure. A manifold is 
insecure if there exists an insecure point pair, and totally insecure 
if all point pairs are insecure. 

Compact, fiat manifolds are secure. A standing conjecture says 
that these are the only secure, compact riemannian manifolds. We 
prove this for surfaces of genus greater than zero. We also prove 
that a closed surface of genus greater than one with any riemannian 
metric and a closed surface of genus one with generic metric are 
totally insecure. 
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1. Introduction 

We begin by describing our setting and establishing the terminology. 
By a riemannian manifold (M, g) we will mean a complete, connected, 
infinitely differentiable riemannian manifold. We will view geodesies 
in (M, g) as curves, c : I ^ M, parameterized by arclength, where 
/ C M is any nontrivial interval. The set c(/) C M is the trace of c. If 
/ = [a,b], we will also say that c(/) is a geodesic segment; the points 
X = c{a),y = c{b) are the endpoints of the geodesic. If z G M is an 
interior point of c(/), we say that c passes through z. 

For any pair x,y E M (including y = x) let G{x,y) be the set of 
geodesic segments in (M, g) with endpoints x, y. We say that these 
geodesies join x with y. A finite set 5 C M \ {x, y} is a blocking set for 
the pair x, y if every geodesic in G{x, y) passes through a point b E B. 
We will also say that B blocks x and y away from each other. 

A pair x, ?/ G M is insecure if these points cannot be blocked away 
from each other. Otherwise, the pair (x, y) is secure. A riemannian 
manifold is insecure if it contains an insecure pair of points. Thus, 
(M, g) is secure if any point in it can be blocked away from any point, 
including itself. Finally, (M, g) is totally insecure if every pair x,y E M 
is insecure. See |Gut05] for a motivation of this terminology. 

Which compact riemannian manifolds are secure? The only examples 
so far are the fiat manifolds [GS06j . Researchers in the subject believe 
in the following statement [BGOSj ILS07] . 

Conjecture 1. A compact riemannian manifold is secure if and only 
if it is flat. 

Restricting the setting, we state a counterpart of Conjecture [1] for 
tori. 

Conjecture 2. A riemannian torus is secure if and only if it is fiat. 

In this note we obtain several results concerning security of closed 
riemannian surfaces. In particular, we establish Conjecture [T] for two- 
dimensional tori. See Theorem 16.41 

Theorem 1. A two-dimensional riemannian torus is secure if and only 
if it is fiat. 

Security and insecurity are preserved under finite coverings |GS06j . 
This observation allows us to restrict the discussion to orientable man- 
ifolds. Our next result concerns the insecurity of closed surfaces of 
genus greater than one. See Theorem 19.71 
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Theorem 2. A closed riemannian surface of genus greater than one 
is totally insecure. 

Since surfaces of genus greater than one do not admit fiat riemannian 
metrics, this Theorem provides evidence for Conjecture [H 

An insecure manifold, in particular, a nonflat two-torus, may have 
secure pairs of points. In section [7] we analyze the security of point 
pairs on two-dimensional tori of revolution. This class of riemannian 
tori contains the round euclidean tori of revolution C M^. Let 
-Ein C be the inner equator. Our Corollary 17.31 says the following. 

Proposition 1. Let cM.^ be a round euclidean torus of revolution. 
Let x,y E be any pair of points. Then it is secure if and only if 
x,y e Ein. 

Tori of revolution are special. By our Corollary 18.71 a generic rie- 
mannian two-torus is totally insecure. Here is the precise statement. 

Corollary 1. The set of riemannian two-tori contains a C^-open and 
-dense subset of totally insecure tori. 

Conjecture [T] holds for locally symmetric spaces [GS06j . Moreover, 
compact locally symmetric spaces of noncompact type are totally inse- 
cure |GS06j . This is true, in particular, for compact surfaces of constant 
negative curvature. A geometric argument showing this is sketched in 
|GS06] . Let M be a surface as above, let x, ?/ G M be a pair of points, 
and let C C M \ {x, y} be a periodic geodesic. The argument in 
question constructs an infinite sequence of geodesies 7„ G G{x,y). As 
n — > oo, the geodesies 7„, their lengths going to infinity, spend almost 
all their time in ever smaller vicinity of C, never intersecting it. Thus, 
through any point z E M \ {x, y} passes at most a finite number of 
geodesies 7„. 

Our proofs of Theorem [T] and Theorem [2] use a similar idea, although 
the two approaches differ considerably in detail. Since we are working 
with arbitrary riemannian metrics, we cannot use the hyperbolicity of 
the geodesic flow, which was crucial for the analysis in |GS06j . In- 
stead, we use the classical results of Morse |Mo] and Hedlund [He], 
as well as more recent results |Bal] . |Ba2j . [In], on minimal geodesies 
in surfaces to construct infinite sequences of joining geodesies with a 
similar behavior. See section H] and section [51 Our Proposition 16.1 1 says 
that once we have an infinite sequence of geodesies joining points x, y 
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and satisfying certain conditions, the pair (x, y) is insecure. The strat- 
egy of proving Theorem [T] and Theorem [2] is to construct in each case 
sequences of geodesies satisfying the requirements of Proposition 16. 1[ 

Another approach to insecurity for riemannian manifolds is based 
on connections between the insecurity and the growth rate of the num- 
ber of joining geodesies. See |BG08] . |LS07j . and |Gut09j . This ap- 
proach works well under additional assumptions, e. g., that the mani- 
fold {M,g) has no conjugate points. Then we can use the well known 
relationships between the growth rate of the number nT{x, y) of joining 
geodesies having length < T and the growth of 7ri(M), as well as those 
between nT{x,y) and the topological entropy of {M,g). 

Acknowledgements. The work of V. Bangert was partially supported by 
SFB/Transregio 71 "Geometrische Partielle Differentialgleichungen" . 
E. Gutkin did some of the work while visiting FIM at ETH, Zurich, 
the Department of Mathematics at UCLA, and the Mathematisches 
Institut at Albert-Ludwigs-Universitat in Freiburg im Breisgau. It is 
a pleasure to thank these institutions for hospitality and financial sup- 
port. 

2. Rays, corays, and Busemann functions 

In this section we review basic material on rays, corays and Buse- 
mann functions in riemannian manifolds. We will use the notation 
(M",(yf) for riemannian manifolds, suppressing g and/or n whenever 
this causes no confusion. We denote by d{-, ■) the riemannian distance 
on M. We will view geodesies as parameterized curves c{t), t E I, 
where / C M is a nontrivial, possibly infinite interval, and t is an ar- 
clength parameter. We will call the set c(/) C M the trace of c. 

Definition 2.1. Let I G M be an interval and let c : I ^ M be a 

geodesic. 

(a) The geodesic c zs minimal if d{c{t) , c{s)) = \t — s\ for alls, t G /. 

(b) A ray is a minimal geodesic c : M>o M. 

(c) Let c : M>o M be a ray, and let C G M be its trace. 

A ray c is a coray to c if there exists a sequence of minimal 
geodesies Cn '■ [0, L„] —>■ M with lim„^oo -^n = oo, such that 
lim„^ooCn(0) = c(0) and Cn{Ln) G C for all n gN. 

Throughout the paper we will denote by -^^(7) the length of a curve. 

Definition 2.2. A geodesic c : I ^ M is homotopically minimal if its 

lifts to the universal riemannian covering of M are minimal. 
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Equivalently, a geodesic c : / ^ M is homotopically minimal iff the 
following holds. Let s,t E I and let s < t. Let 7 : [s, t] ^ M be a 
curve satisfying 7(5) = c(s), 7(t) = c(t) and such that the curves 7 and 
c|[s,t] are homotopic with fixed endpoints. Then 

L{c{[sM<m- 

Throughout the paper we will use the following basic result. It is 
essentially due to M. Morse. See |Moj . Theorems 9 and 10. 

Theorem 2.3. Let M he an orientahle surface, and let c : ^ M 
he a periodic geodesic with period L > 0. If the closed curve c|[o,l] has 
minimal length among all closed curves freely homotopic to c|[o.l]j then 
c is homotopically minimal. 

Taking limits of minimal geodesies of finite length, we obtain the 
following basic fact. 

Proposition 2.4. A complete riemannian manifold {M,g) carries a 
ray if and only if it is not compact. If c is a ray in (M, g) and p G M, 
then there exists a coray c to c with c(0) = p. 

Definition 2.5. Let c : IR+ ^ M he a ray. Its Busemann function, 
Be : M ^ M., is defined hy 

(1) B,{p) =lim [d{p,c{t))-t]. 

t—rOO 

By the triangle inequality, the function t —>■ d{p, c{t))—t is monotoni- 
cally decreasing^ Also by the triangle inequality, it satisfies — ci(c(0),p) < 
d{p,c{t)) — t. Thus, the limit in equation ([T]) exists. 

Lemma 2.6. Let c : IR+ ^ M he a ray, and let p,q E M he arhitrary 
points. Then 

mp)-B,iq)\<d{p,q). 

Proof. Apply the triangle inequality to the triangle with corners p, q, c{t), 
and take the limit t ^ 00. ■ 

By Lemma [221 any Busemann function is lipschitz, with the lipschitz 
constant 1. 



"'^In general, not strictly. 
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Proposition 2.7. Let c : IR+ M be a ray. A geodesic c : IR+ — >• M 
is a coray to c if and only if for all s,t E M+ the equation 

B,{c{t)) - B,{d{s)) = s-t 

holds. 

Proof. This follows from equations (22.16) and (22.20) in jBu] . ■ 

We use Proposition 12.71 to relax the requirements in Definition 12.11 

Lemma 2.8. Let c : M+ M be a ray, and let C G M be its trace. 
Let Ln —>■ oo be a positive sequence. Let Cn '■ [0, L„,] M be minimal 
geodesies such that limn^oo d{cn{Ln) , C) = 0. 

Ifc : M+ M is a geodesic such that c(0) is a point of accumulation 
of the sequence Cn(0), then c is a coray to c. 

Proof. We assume without loss of generality that hm„^oo c„(0) = c(0). 
For every n G N there is a number t„ G [0, cxd) such that the sequence 
En = d{cn{Ln) , c(tn)) couvcrges to zero. Since the geodesies c„ are 
minimal, the condition lim„^oo -^n = oo implies that lim^^oo^n = oo. 
By the triangle inequality, for all n and any t G [0, L„] we have 

(2) Ln-t-en< d{Cn{t), c(t„)) < L„ - t + 5„. 

Let s,t > be arbitrary. Using that hmc„(0) = c(0) and equation ([2]), 
we have 

B,{c{t)) - B,{c{s)) = lim [d{c{t), c{tn)) - d{c{s), c(t„))] 
= lim [d{cn{t), c{tn)) - d[cn{s), c(t„))] > lim (s - t - 25„) = s-t. 

n— >oo n— >oo 

Combining this inequality with Lemma 12. 6[ we obtain 

(3) B,{c{t)) - B,{c[s)) = s~t. 

The claim now follows from Proposition 12. 7[ ■ 

3. Outline of the proof that nonflat two-tori are 

insecure 

For the benefit of the reader, we will outline the main ideas in the 
proof of Theorem 16.41 which is Theorem [1] in the Introduction. The 
methods used in this proof are also typical for several other statements 
in this paper. Let (T^,^) be a non-fiat two-dimensional torus; our goal 
is to find a pair of points in (T^,^) that cannot be blocked away from 
each other by a finite blocking set. 

By a classical theorem of E. Hopf |Hoj . a riemannian two-torus is 
fiat if and only if it has no conjugate points. Thus, the torus (T'^,g) 
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has conjugate points. Then, by a theorem of N. Innami, there exists 
a nontrivial free homotopy class a of closed curves such that [T"^,^) 
cannot be foliated by geodesies in a. See [In], Corollary 3.2; see also 
the proof of Theorem 6.1 in |Ba2j . 

Let Ai^^^ be the set of periodic geodesies of minimal length in the 
class a. By results that go back to M. Morse [Moj and G. Hedlund 
[He] , these geodesies do not self-intersect and are pairwise disjoint. 
Generically, J^^^'^ consists of a single geodesic. 

The geodesies in A^p°'' foliate a compact, proper subset, N C T^. 
Let Z C be a connected component of \ N; let p,q & Z he any 
pair of points. We will show that the pair p,q is insecure, i. e., that 
we cannot block p away from g by a finite blocking set. 

We denote by the riemannian universal covering; let tt : 

(M^, g) —>■ {T'^,g) be the projection. Let S* C be a connected compo- 
nent of 7r~^{Z). Then S is an open strip. The boundary dS is a disjoint 
union of traces of two geodesies, Cq : M ^ (M^, g) and Ci : M ^ (M^, g). 
By Theorem 12. 3[ the geodesies Cq, Ci are minimal. Let Cq, Ci be the 
respective traces; then dS = CqU Ci. 

Let P,QoES be arbitrary points such that 7r(P) = p, 7r(Qo) = Q- 
Using the action of the stabilizer of S in 7ri(T^) = Z^, we produce an 
infinite sequence of points Qi, . . . , Qn, . . . G S* such that n{Qn) = q 
and the sequence of distances L„ = d{P, Qn) goes to infinity. Let now 
c„ : [0, Ln] — s> S" be a sequence of minimal geodesies such that c„(0) = P 

and Cn{Ln) = Qn- 

Lemma [5?T] in section [5] implies that most of the time the geodesies Cn 
are close to dS. More precisely, for any e > there exists T = T[e) > 
such that for all t G [T, L„ — T] the points Cnit) are £-close to dS. 
Figure [1] illustrates the behavior of this sequence of geodesies. 

Set c„ = vr o c.„. Then the geodesies Cn : [0, Z join the points 

p, q. Let z E Z\{p,q} be an arbitrary point. The preceding discussion 
implies that at most a finite number of the geodesies Cn passes through 
z. On the other hand, if 2; G \ Z, no geodesic in our sequence passes 
through it. Thus, any point 2; G can block at most a finite number 
of joining geodesies in the infinite sequence Cn- Hence, we cannot block 
the points p, q away from each other by a finite blocking set. 

We will now illustrate the preceding discussion with the example of 
round euclidean tori of revolution. 

Example 3.1. Let < r < i?, and set C = C{r,R) = {{x,0,z) : 
{x — Ry + z"^ = r"^}. This is a circle of radius r in the xz-plane. The 
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Figure 1. A sequence of minimal geodesies in the uni- 
versal covering hose projections to the torus cannot be 
blocked by a finite point set. 

round euclidean torus of revolution, = T^(r, i?) C M^, is obtained 
by revolving C about the z-axis. Points in C yield the circles of latitude 
in T^. Let a be their free homotopy class. 

Let the inner equator i^in C (resp. the outer equator Eout C 
T^) be the circle of latitude generated by the point (i? — r, 0, 0) G C 
(resp. {R + r, 0, 0) G C). Their lengths are 27r{R — r) and 27r(i? + r) 
respectively. These are the only circles of latitude that are geodesies 
in the round euclidean torus. 

Specializing the preceding discussion to the torus of revolution, we 
have N = Ei^ and Z = T"^ \ Ei^. The set Ai^^^ consists of a single 
geodesic; although the tori of revolution are very special, this is the 
generic situation for two-dimensional riemannian tori. See section [HI 
By the preceding argument, no points p,q E \ Ei^ can be blocked 
away from each other by a finite blocking set. 

In section [7] we will completely analyze the blocking for a class of 
two-dimensional tori containing the above tori of revolution. 
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4. Minimal geodesics in an admissible strip 

We will use the notation of section [3l in particular, we use the iden- 
tification (T^g) = (m\g)/Z\ use M^, we denote by 

Stab(^) = {j eZ^ : S + j = S} 

the stabilizer of S. Recall that a nonzero vector j G is prime if there 
do not exist n G N, n > 2, and /c G such that j = nk. 

We will use the notation X for the closure of a set. 

Proposition 4.1. Let (T^,^) be a nonflat riemannian torus. Let 
{^,g) he its universal covering, and let vr : (M^^f) iT^,9) be the 
projection. 

Then there exists a connected open set 5 C with totally geodesic 
boundary, such that the following statements hold. 

(a) The group Stab{S) is generated by a prime vector. 

(b) // J G Z2 \ Stab{S), then {S + j) nS = dl. 

(c) The boundary of S has two connected components, say Co and 
Ci. There are minimal geodesics Cq, Ci : M — > whose 
traces are Cq and Ci, respectively. 

(d) Let c : ^ S be a geodesic such that noc : M. ^ T"^ is periodic. 
Then c is not minimal. 

Proof. By Corollary 3.2 in [Inj, there exists a nontrivial free homotopy 
class, say a, of closed curves in having the following property: There 
does not exist a family of closed geodesics in the class a whose traces 
foliate T^. We can assume that a is prime. 

Let L be the minimal length of a curve in a; we denote by Ai^^"^ 
the set of closed geodesics in the class a having length L. Clearly, 
A^P^'' 7^ 0. By Theorem 6.5 and Theorem 6.6 in |Balj . the trace of every 
c G A^P"' is an embedded curve in T^. Moreover, if c, c G Ai"^^, then 
either their traces are disjoint or c and c coincide up to a translation 
of the parameter. 

Let be the union of the traces of geodesics in Ai^'^'^. By our choice 
of a, the set C is a proper, nonempty, closed subset. Let Z be 
a connected component of \ N. Let dZ = Z \ Z be its boundary. 
Then either dZ is the trace of a geodesic in Ai^'^^ or dZ is the union 
of traces of two geodesics in A^p'^^'o 

Let be a connected component of 7r~^(Z') C M^. Then the bound- 
ary of S is the union of the traces of two geodesics cq, Ci : M ^ such 



^We point out that Z is homconiorphic to the cyhnder x (0, 1). 
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that vr o Co and vr o ci belong to J^^^'^. Let k & I? correspond to a. 
Then for all t G M we have 

(4) co(t + L) = co{t) + k, ci{t + L) = ci{t) + k. 

Theorem 12 ■ 31 implies that cq and ci are homotopically minimal geodesies. 
The remaining statements in (a), (b), and (c) now follow by elementary 
topological arguments; claim (d) follows from Theorem 6.7 in [Balj . ■ 

In what follows an open set 5* C satisfying the conditions stated 
in Proposition 14.11 will be called an admissible strip; the projection 
Z = n{S) C is an admissible cylinder. 

5. The key lemma 

We will use the setting and the notation of section |H In particular, 
S will denote an admissible strip. The following statement is crucial in 
our proof of Theorem 16.41 We will refer to it as the Key Lemma. 

Lemma 5.1. For any e > there exists T = T{e) > such that the fol- 
lowing holds. Ifc : [0, L] ^ S is a minimal geodesic and d{c{0), dS) > e 
then d{c{t), dS) < e for all te[T,L-T]. 

The proof of Lemma 15.11 is based on the results of M. Morse [Mo] 
about minimal geodesies in S and on a result from |Ba2j concerning 
the rays in S. We need a few technical lemmas. 

Lemma 5.2. Let c : [0, oo) S be a ray. Then limj_,oo c?(c(t), (95*) = 
0. 

Proof. The claim follows from Theorem 3.7 in |Ba2] . interpreted as a 
statement about minimal geodesies in (M^, ^f). See Example (1) on page 
51 in |Ba2] for details. ■ 

Throughout this section we will use the following notational conven- 
tions. With any geodesic c : M ^ S* we will associate two geodesies 
c± : ]R+ ^ S* as follows. The geodesic c+ is the restriction of c to the 
positive half-line. We define the geodesic c_ by c_(t) = c(— t). 

We will denote by C, C+, C_ C S the respective traces of c, c+, c_. 

Definition 5.3. Let cq, ci : M — ^ S* be two geodesies such that their 
traces Co,Ci are the two components ofdS. We say that the geodesies 
Co,Ci are coherently oriented if for any time sequence t„ — s> oo the two 
point sequences co(tn), ci(tn) G dS converge to the same end of S. 
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Co 

Figure 2. A strip with coherently oriented boundary components. 

Figure [2] illustrates Definition 15.31 We will also say that Cq, Ci : R — > 
S are coherent parameterizations of dS. 

Lemma 5.4. Let dS = Co U Ci, where co,ci : M ^ S* are coherently 
oriented. Let the geodesies co.± : IR+ dS and ci,± : M+ OS he as 
above; let Co,± C OS and Ci^± C dS he the respective traces. 

Let now c : M. ^ S he a minimal geodesic. Then, switching cq with 
Ci and reversing the orientation of c, if need he, we have 

(5) lim rf(c(t),Co,_) = 0, lim rf(c(t),Ci,+) = 0. 

Proof. By Lemma 15^21 c{t) converges to dS as \t\ oo. By Theorem 15 
in |Moj or by Theorem 6.7 in [Balj . the equation limt^_oo d{c{t), Cq-) = 
implies limt-,+oo d{c(t) , Ci,+) = 0. ■ 

Remark 5.5. Let M be a riemannian manifold. If c : / — M is a 

geodesic, its inverse is the geodesic : — / — > M defined by c~^{t) = 
c{—t). Lemma [5.41 is equivalent to the following geometric fact. 
Let Z C be an admissible cylinder. Assume, for simplicity of ex- 
position, that the closure of Z is a proper subset of T^. Let co,ci : 
M — s> (T^,^) be the periodic geodesies in the homotopy class a whose 
respective traces are the two components of the boundary dZ. 

Let now c : M — > Z be a geodesic whose lift c : M — S" is minimal. 
Then c is a heteroclinic connection either between cq and Ci or between 
Cn ^ and c7^. 
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Our next lemma says that if a ray in S* is a coray to a ray in a 
boundary component of S, then it is asymptotic to this component. 

Lemma 5.6. Let cq : M — > 5 6e a geodesic whose trace is one of the 
components of dS. 

Let c : ]R+ ^ S he a coray to Co,+ . Then hm^^oo d{c(t), Co,+) = 0. 

Proof. By Theorem 3.7 in |Ba2] . for any g G S* there exists a ray 
c : ]R+ S such that c(0) = q and hmt^oo d{c(t), Co,+) = 0. Hence, by 
Lemma [5.21 and Lemma [2.81 c is a coray to co,+. 

Set q = c(l), and let c : M+ — > S" be as above. Thus, both c and c are 
corays to co,+ ; by construction, c(0) = c(l). The geodesic t i— > c(l + 1) 
is also a coray to co,+ starting at g = c(l) = c(0). By Theorem 22.19 
in |Bu] or, by Corollary 3.8 in |Ba2] . there is only one coray to Co,+ 
starting at q. Figure [3] shows a hypothetical configuration of the rays 
c and c which cannot materialize. 

Therefore, the ray c satisfies c(t) = c(l + t). Since c is asymptotic to 
Co,+, the claim follows. ■ 




Co 

Figure 3. Illustration to the proof of Lemma 15. 6t A 
configuration that does not exist. 

We will now prove a preliminary variant of the Key Lemma. 

Lemma 5.7. For any s > there exists r] = r]{e) > such that 
the following holds. Let < L < oo, and let c : [0,L] ^ S be a 
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minimal geodesic such that d{c{0), dS) > e and d{c{L), Ci) < r]. Then 
d{c{t), Co) > r] for all t G [0, L] . 

Proof. Suppose that the claim fails. Then there exists 5 > 0, a se- 
quence of minimal geodesies c„ : [0, L„] — > S, and a sequence t„ G 
[0, L„] such that d{cn{0),dS) > 6, \imn->ood{cn{Ln),Ci) = 0, and 
lim^^oo d{Cn(tn), Co)_= 0. 

The closed strip S is invariant under the group Stab(S') ^ A;Z that 
acts on S by isometrics. We have denoted this action by 2; i— > z+rk. We 
will use the same notation for the corresponding action of Stab(S') on 
geodesies in S. Then for any integers ri, . . . , r„, . . . G Z the sequence of 
geodesies c„ = c„ + r„/c satisfies the above conditions. In view of this 
observation, and the compactness of the quotient S/kZ, we assume 
without loss of generality that the vectors c„(0) converge to a limit 
vector, V G T^{S,g)] let j> G S* be its footpoint. 

We will now prove that lim^^oo tn = 00. If this fails, then, by passing 
to a subsequence, if need be, we have limt„ = t<oo. Let c : M — > 
be the geodesic with the initial vector v. Then c(0) = p E S, and 
c(^) = Q = lim^^oo c„(t„) G Co C dS. Since dS is geodesic, c intersects 
it transversally at q. Thus, for t > t and sufficiently close to t, we have 
c(t) ^ S. Figure H] illustrates the analysis. 

On the other hand, liminf Ln >t + d{Co, Ci) implies that c{t) G S 
for all t G [0,t + d{Co, Ci)]. In view of this contradiction, limt„ = 00. 

Since lim(i(c„(t„), Cq) = and limt„ = 00, by Lemma 12.81 c is a 
coray to co,+ or cq,-. Similarly, lim(i(c„(L„), Ci) = and limL„, = 00 
imply, by Lemma 12.81 that c is a coray to Ci^+ or Ci^_. In view of 
Lemma [5.61 this is impossible. ■ 

We will now prove the Key Lemma. Recall that we view geodesies 
in S as mappings c : / — of nontrivial intervals / C M. For t E I 
the velocity vectors c{t) are unit tangent vectors in (]R^,5f). Thus, 
length(c) = |/|. If G /, we will refer to c(0) as the initial vector of c. 

Proof, (of Lemma 15. ip Suppose the claim fails. Then for some e > 
there exists a sequence of minimal geodesies c„ : [0, L„] — s> S such that 
the following conditions are satisfied: 

i) For all n G N we have rf(c„,(0), dS) > e; 

ii) For each n there is tn G [n, Ln — n] so that (i(c„(t„), OS) > e. 

As in the proof of Lemma 15. 7[ we assume without loss of generality 
that the velocity vectors c„(t„) converge to a vector v G T^{S,g). Let 
c : M ^ S* be the geodesic such that v = c(0). Since all of c„ : [0, Ln] 
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Co 



Figure 4. Illustration to the proof of Lemma [5. 7t The 
behavior of the geodesic c deduced from the assumption 
lim^^oo^n < oo. 

S are minimal, and t„ G [n, — n], we conclude that c : M ^ S" is a 
minimal geodesic. By construction, it satisfies d{c{0),dS) > e. 

Let r] = 'r]{e) > he as in Lemma 15.71 By Lemma 15.41 there are 
So, si e M such that d{c{so), Cq) < r] and d{c{si), Ci) < rj. 

Interchanging Co and Ci, if need be, we may assume that so < si. 
For any t G M we have lim„^oo Cn(in + i) = c(t). In particular, c(so) = 
lim„^ooC„(t„ + So) and c(si) = lim„^ooC„(t„ + Si). Therefore, for 
sufficiently large n the inequalities d{cn{tn + so), Co) < r) and d{cn(tn + 
Si), Ci) < rj hold. Besides, for sufficiently large n we have < t„ + So < 

+ ■5l < 

Let G N be any index such that the above conditions hold. Set 
L = tn + Si, and let c : [0,L] —>■ S be the restriction of c„ to [0, tn + si]. 
Then d{c{0),dS) > e and (i(c(L),Ci) < 77. But we also have d{c(tn + 
■So); C*o) < ^7) and t„ + So G (0, L). By Lemma IHTTl this is impossible. ■ 

We will also need the following complement to Lemma [5.11 

Lemma 5.8. For any e > there exists T = T{e) such that the 
following holds. If c : [0,L] ^ S is a minimal geodesic such that 
d(c(0), Ci) > e and c{L) G Co then d{c{t), Cq) < e for all t G [T, L]. 

Proof. By Theorem 14 in |Moj (see also Theorem 6.8 in [Balj ). there ex- 
ist minimal geodesies c± : M — >• S" such that limj_,_oo d{c+(t), Co,_) = 
and limj^oo c^(c+(t), Ci,+) = 0, while limt^_ood{c-{t),Ci-) = and 
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limt^oo '^(c_(t), Co,+) = 0. Hence the geodesies c_ and c+ intersect; 
being minimal, they intersect exactly once. Let G M be deter- 

mined by c_(t_) = c+(t+). We denote by S'(c_, c+) C S the connected 
component of S \ (c_(]R) U c+(M)) whose boundary is 9S'(c„,c+) = 
Co U c+((-oo,t+]) Uc_([t_,oo)). See Figured 

If /c G Stab(5') then — k and c_ + /c have the same properties as 
c+ and c_. If fc is not the identity map, then 

Ur£zS{c^ + rk,c+ — rk) = S. 

A straightforward compactness argument shows that for every e > 
there exists r G Z such that the following holds: If p G S and d{p, Ci) > 
e then there exists j G Stab(S') such that 

p + j G S{c- + rk, c+ — rk). 

We set c_ = C-+rk, c_|_ = c+— r/c and use the preceding statement for 
p = c(0). Thus, translating c by some j G Stab(S'), if necessary, we may 
assume that c(0) G S'(c_,c+). By the minimality of geodesies c, c_,c_|_ 
and the inclusions c(0) G S{c-, c+), c(L) G Co, we conclude that c{t) G 
5'(c_,c+) for all t G [0,L]. Now the conditions lim(^_oo (i(c+(t), Co,_) = 
and lim(_,oo d{c-.{t), Co,+) = imply the claim. ■ 




Co 

Figure 5. Illustrates the proof of Lemma [5.81 

Remark 5.9. The claim of Lemma 15.81 is geometrically obvious, al- 
though a formal proof is somewhat cumbersome. For the benefit of 
the reader, we indicate how to formalize the last step in the preceding 
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argument. Using the normal exponential map of Co, we represent the 
ends c_|_((— CX3, — To]) and c_([To,oo)) of c+ and c_ as graphs over Cq 
for sufficiently large Tq. Then, for sufficiently large t G [0,L] the point 
c(t) is located between Cq and one of these graphs. 



6. NONFLAT TWO-DIMENSIONAL TORI ARE INSECURE 

In this section we prove that every nonflat two-torus has an open set 
of insecure point pairs. We begin with an auxiliary proposition; it pro- 
vides a general sufficient condition for a pair of points in a riemannian 
manifold to be insecure. 

Proposition 6.1. Letp, q be points in a complete riemannian manifold 
M . Let A (Z M be a nonempty closed set. Suppose that there exists a 
sequence of geodesies c„ : [0,L„] M from p = c„(0) to q = Cn{Ln) 
with the following properties: 

a) We have lim„,^oo Ln = oo; 

b) IfneN and t G (0, L„) then Cn{t) ^ A; 

c) The geodesic Cn has no conjugate points in the interval [0, Ln); 

d) For every 5 > there exists T = T{s) > such that for all 
n G N and T < t < — T we have d{cn(t), A) < e. 

Thenp andq cannot be blocked away from each other by a finite blocking 
set. 

Proof. In the course of proof we will pass repeatedly from sequences 
of geodesies to infinite subsequences. In order to avoid cumbersome 
notation, we will use the following convention. Let at be an infinite 
sequence. We will denote its infinite subsequences by again, as 
opposed to, say, a^^.. 

Assume that the claim fails. Then there is a point z G M \ {p, g} 
and infinitely many n G N such that z = c„,(t„,) for some t„ G (0,L„). 
Passing to a subsequence, we assume that for all n G N there exist 
tn G (0, L„) such that z = c„(t„). Set 

e = e{p, q, ^.^) = \ min {{d{p, A), d{q, A), d{z, A)} \ {0}) . 

Let T = T{e) be as in condition d). Passing to a subsequence, if 
need be, and using condition d), we obtain that either tn G (0,T) or 
tn e {Ln - T, Ln) for all n G N. 
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Consider first the case tn G (0,T). Again passing to a subsequence, 
we assume that hm„^oo tn = i exists, and the geodesies c„ converge to 
a geodesic c : [0, oo) M. Thus, we have 

(6) c„(t„) = z = c{i) 

for all n G N. Since c(0) = p and z ^ p, we conclude that t > 0. 
By conditions a) and c), the geodesic c has no conjugate points. This 
contradicts equation ([6]), unless we have Cn = c|[o,l„] for almost all 
n eN. 

Suppose this is the case. Then, by condition a), there are positive 
integers n < m such that T < Ln < Lm — T and q = Cn{Ln) = 
c{Ln) = Cm{Ln). Then, by condition h), q ^ A. On the other hand, by 
condition d), we have d{cm{Ln),A) < e. This contradicts our choice of 
£ < d{q,A). Thus, we have arrived at a contradiction. 

It remains to consider the case tn G {Ln — T,Ln)- Observe that our 
setting is symmetric with respect to the interchange of p and q and 
simultaneous reversal of the time direction. This symmetry flips the 
two cases at hand. Thus, the assumption t„ G (L„ — T, Ln) leads to a 
contradiction as well. ■ 

Our next result yields the existence of a nonempty open set of inse- 
cure point pairs in a nonfiat two-torus. 

Theorem 6.2. Let be a nonfiat riemannian two-torus. Let Z G T"^ 
be an admissible cylinder, as introduced in section Then every pair 
{p,q) E Z X Z is insecure. 

Proof. We apply Proposition 16.11 to our torus, with A = dZ. Let S be 
an admissible strip corresponding to Z; let P G S, Q G S be such that 
7r(P) = p, 7i{Q) = q. Let k G Stab(S') be as in section HI For every 
n G N we choose a minimal geodesic Cn : [0, L„] — > S from c„(0) = P 
to Cn{Ln) = Q + nk. Set c„ = vr o c„. By definition, this is a sequence 
of geodesies c„ : [0, L„] from p to q. 

Next, we check that the assumptions of Proposition 16. II are satisfied. 
Assumptions a) and c) are satisfied by construction. Assumption b) is 
satisfied because p E Z and the set A = dZ is totally geodesic. As- 
sumption d) follows from Lemma [5?T] when q E Z and from Lemma [531 
when q G dZ. ■ 

Remark 6.3. The preprint [WKH] gives an argument to show the 
insecurity for pairs [p E Z,q E dZ). This observation is not contained 
in |BaG08j which is a preliminary version of the present paper. 
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Theorem 6.4. A two-dimensional riemannian torus is secure if and 
only if it is flat. 

Proof. By |Gut05j or |GS06] . a flat torus is secure. Theorem 16.21 implies 
the existence of insecure point pairs in any nonflat two-torus. ■ 

We point out that the flat tori are distinguished amongst all rie- 
mannian two-tori by the security of pairs y = x. 

Corollary 6.5. A two-dimensional riemannian torus is flat if and only 
if all pairs (x, x) are secure. 

Proof. It suffices to show that a nonflat riemannian two-torus contains 
at least one point that cannot be blocked away from itself. Let Z be 
an admissible cylinder. Then any point x ^ Z cannot be blocked away 
from itself. ■ 



7. Blocking and insecurity for tori of revolution 

By a two-torus of revolution we will mean the cartesian square of 
the standard circle T = M/Z with the riemannian metric 

(7) ds^ = f\y)dx^ + dy^ 

The somewhat more general T-invariant riemannian tori 

(8) ds' = f\y)dx' + g\y)dy', 

reduce to the torus of revolution equation ([7]) by a change of variables. 

Thus, our torus of revolution is determined by the positive function 
/ : T — > ]R_|_. To emphasize the dependence on / we will sometimes 
denote the riemannian torus in equation (j7]) by T|. We will assume 
that / is strictly positive and infinitely differentiable. 

Our analysis is based on the symmetries of T|. The riemannian 
metric in equation ([7]) is invariant with respect to the action of T on 
by {x, y) \—>- {x -\- a, y). Besides rotations Pa{x) = x + a mod 1, the 
isometry group of T contains reflections. With each a ^ T we associate 
the reflection aa{x) = 2a — x mod 1. Then aa is orientation reversing; 
it has two fixed points: a, a -|- |. 

Proposition 7.1. Let f : T ^ R+ he a smooth, positive function. 
Suppose that i) it has a unique minimum, say at the point a G T ; ii) it 
is invariant under the reflection cja- 

Then all pairs {(p, a), (q', a)} E Tj x Tj are secure. All other pairs 
of points in T? are insecure. 
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Proof. Let F, G be transformations of T. We denote by F x G the 
transformation of given by (x, y) ^ {F{x), G{y)). 

For arbitrary points p,q & T let Fpg : T — > T be the unique reflection 
interchanging p and q. If r G T is any of the two midpoints between p 
and q, then Fp g = a^- We set 

(9) V^p,g = Fp^q X Oa- 

Then ^ : ^ is an involution: </5p ^ = Id; it has exactly 4 fixed 
points. 

^2 



The coordinate vector fields d / dx,d / dy on T yield global coordi- 



nates on the tangent bundle to T?. Let X be a tangent vector to 



The unique decomposition 

dx ^ dy 

defines the isomorphism X i— > {{x,y), rj)) of the tangent bundle and 
X M^. If the base point of a tangent vector X is clear from the 
context, we will identify X with (^,r/) G M^. Let H : T"^ ^ T'^ he & 
diffeomorphism. Our isomorphism identifies the differentials Di^^y-^H 
with 2x2 matrices. By equation ([2]), we have 

(10) D^^^y)Lpp^g = -Id 

identically on T^. 

From now on, we view as the riemannian torus of revolution T|. 
Let y E T. By analogy with the round euclidean torus, we define the 
circles of latitude as = T x {y} c Tj. 

Let X be the tangent vector with the base point (x, y) and the rep- 
resentation X = (Cr/). The function on the tangent bundle given by 

(11) Fix) = f{y)i 

is the Clairaut integral for the geodesic flow on the tangent bundle of 
T] [KI]. Let c : M ^ T] be a geodesic. Set c{t) = {x{t),y{t)),c{t) = 
{x(t),y(t)). Let ti 7^ t2 be such that y(ti) = y(t2). Then, from equa- 
tions dZD, (HH) 

(12) x{h)=x{t2), \y{t^)\ = \y{t2)\. 

Suppose now that c(0) G La- Then, by equations ([7]) and (ITT!) 

(13) mm\y{t)\ = \y{ 



By equation f|T3l) . the geodesies c(t) = {x(t),y(t)) in T| that intersect 
the circle La satisfy the following dichotomy: Either y{t) = or y(t) 
does not change sign. In the former case, the trace of c is La- In 
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the latter case, the geodesic c winds around Tj crossing every circle of 
latitude transversally, as opposed to oscillating between two circles of 
latitude. Thus, for the geodesies c : M ^ T| intersecting the circle La, 
equation ( fT2l) becomes 

(14) x{h) = x(t2), y{ti) = m). 

Let A be the free homotopy class of the circles of latitude. By condi- 
tion i) on /, the closed curve La C T| is the unique minimal geodesic 
in A. In view of Theorem 16.21 it suffices to show that any pair of 
points in La is secure. To simplify notation, we will use the shorthand 
{{p, a), (g, a)} = {p, q} E La x La- For any torus of revolution T| the 
transformations Fp^g x Id : T| ^ T| are isometrics. By assumption ii), 
the transformation Id x cTq : ^ Tj is also an isometry of Tj. Thus, 
the involutions (fp^g : Tj Tj from equation ([9]) are isometrics. 

We denote by Gp^g the set of geodesies c : M — T| such that for 
some tp < tg we have c(tp) = p, c{tq) = q. Restricting these geodesies 
to [tp, tg] and taking their traces, we obtain the set Fp g of geodesic 
segments connecting p and q. Note that Tg p = Fp g. By equation 
iPp^g : Gp^g Gg^p, Siiid hcucc </3p,q(Fp^q) = Tp^g. We will now show that 
actually ipp^g maps every geodesic segment c G Gp^g to itself. 

Let c e Gp^g. By equation (fT^ . c{tp) = c(tg). In view of equa- 
tion ffTOj) . every geodesic geodesic segment connecting p and q is invari- 
ant under ipp^g. Since ipp^g interchanges p and q, it fixes the midpoint 
of each 7 G Tp^g. 

Thus, the midpoint, say m(7), of any 7 G Fp ,, is one of the four fixed 
points of (fp^g. It may happen that 771(7) = P- Then 7 is a multiple of 
a prime geodesic segment j3 G Tp^g. Applying the same argument to /3, 
we conclude that the set of fixed points of ipp^g minus the set {p, q} is 
a blocking set for Tp^g. ■ 

Remark 7.2. A pair {p, q} in a riemannian manifold is midpoint se- 
cure if the set of midpoints of geodesies 7 G Fp ^ is finite. A manifold 
is midpoint secure if every pair in M is midpoint secure. Flat mani- 
folds are midpoint secure. Secure pairs in compact symmetric spaces 
are midpoint secure [GS06j . By our proof of Proposition 17.11 a pair 
in a torus of revolution is either insecure or midpoint secure. These 
examples seem to suggest that security is equivalent to the midpoint 
security. This is false, however. P. Herreros |Her] gave an example 
of a riemannian two-sphere with a large family of point pairs that are 
secure but not midpoint secure. 
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Corollary 7.3. Let = T^{r,R) cM.^ be a round euclidean torus of 
revolution. See Example VJ . 1\ Let C be the inner equator. Then 
a point pair {p, g} G x is secure if and only if {p, q} G Ein x Ein. 
The pairs in E^ are, in fact, midpoint secure. 

Proof. We will refer to T^(r, R) C M"^ as the round euclidean torus. In 
the standard angular coordinates < a, /5 < 27r the round euclidean 
torus has the metric 

(15) ds"^ = {R-r cos (3)^ da"^ + r^d(3'^. 

Since the round euclidean torus is a special case of the torus in equa- 
tion ([H]), we reduce it to a torus of revolution T| of equation ([7]). In this 
representation we have f{y) = R — r cos(27r?/), up to a constant factor. 
This function has a unique minimum, /(O) = R — r, and is invariant 
under the reflection a^y) = —y mod 1. Hence, Proposition 17.11 and 
Remark 17.21 apply. ■ 

8. Insecurity for all point pairs in a two-dimensional 

TORUS 

In the preceding section we saw that there are nonflat two-tori with 
some secure point pairs. Now we will prove that such tori are excep- 
tional. We will exhibit a C^-open and C°°-dense subset Qtot of the 
space of riemannian metrics on the two-torus such that for metrics in 
Qtot every pair {p, q) E T"^ x is insecure. 

We will recall a few well known facts about homotopically minimal 
geodesies on an arbitrary riemannian two-torus {T'^,g). First, we ex- 
plain what we mean by the homological direction of a homotopically 
minimal geodesic c : M — > T^. If c : M — > is a lift of c, then there 
is a strip bounded by two parallel lines in that contains c. The 
minimality of c implies that c is proper and separates the boundary 
components of the strip. This was first proven by G.A. Hedlund |He] . 
See also [Balj . Theorem 6.5. Moreover, c determines an orientation for 
the parallel lines in the strip. This oriented direction can be viewed 
as an element in the quotient of \ {0} by the multiplicative action 
of M+. Representing as M^/Z^, as usual, we identify C with 
Hi{T^,Z) and with Hi{T^,R). 

The homological direction [h] G {Hi{T^,R) \ {0})/M+ of the ho- 
motopically minimal geodesic c is the oriented direction of a strip that 
contains a lift of c. Let c be a periodic geodesic of minimal length in its 
free homotopy class. Then c is homotopically minimal, by Theorem l2.3[ 
Let h = h{c) be its homology class. Then the homological direction of c 
is the image of h{c) G Hi{T^, Z) in the quotient (Hi^T'^, R) \ {0}) /R+. 
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Alternatively, one can define the homological direction of a homo- 
topically minimal geodesic as follows. Let c : M ^ be one. Let 
Si,ti G M, 2 G N, be two infinite sequences such that Sj < tj and 
ti — Si — > oo. Let 7j, i G N, be arbitrary curves from c(tj) to c(sj) 
such that their lengths are uniformly bounded. We will denote by 
a * f3 the concatenation of curves a and (3 whenever it is defined. Let 
hi G Hi(T^,M.) be the homology class of the closed curve c|[s.^t.] * 7^. 
Then, for all but a finite number of indices, we have hi 7^ 0, defining 
the direction [hi] G {Hi{T^,R) \ {0})/M+. Moreover, as i ^ 00, the 
sequence [hi] converges; the limit [h] = limj^oo[^i] is the homological 
direction of c. See |Sch] for a similar concept. 

Let S be an oriented surface. Let Vi,V2 be linearly independent 
tangent vectors with the same base point in S. We set e{vi,V2) = 1 
if the pair vi,V2 is positively oriented, and e{vi,V2) = —1 otherwise. 
Let [hi], [h2] G (ifi(T2,M) \ {0})/M+. Let hi G [hi] for z = 1,2. Then 
the sign of the homological intersection hi ■ h2 does not depend on the 
choices of hi G [hi]. Hence, we will use the notation sgn (/zi ■ /i2) G 
{0,±1}. 

We will need the following property of homotopically minimal geodesies 
on a two-torus. 

Lemma 8.1. Let Ci : M ^ T^, C2 : M — > be homotopically minimal 
geodesies. Let [hi],[h2] G (ifi(T^,]R) \ {0})/M_|. be their homological 
directions. 

Suppose that sgnihi ■ /12) 7^ 0. Then for any ti,t2 ^ 1^ such that 
ci(ti) = £2(^2); have 

£^(ci(ti), 02(^2)) = sgnQii ■ h2). 

Proof. Let Cj : M ^ M^, i = 1,2, be the lifts of q such that ci(ti) = 
22(^2)- We will prove that £:(ci(ti), £2(^2)) = sgn (/ii ■ /12). 

We identify ifi(T^M) with as always, and set k = {thi : t G M} 
where i = 1,2. Note that li,l2 are oriented straight lines in M^. For 
{s, t) eRx [0, 1] and i = 1,2, set Hi{s, t) = {1 - t)ci{s) + tshi. Then 
ifj : M X [0, 1] — > is a homotopy between Cj and the line k. Set 
K = {{s,t) E [0, 1] : Hi{s, t) G 12}- By remarks in the beginning of 
this section, K is a compact subset of M x [0, 1]. Standard arguments 
from differential topolog}{^ show that the oriented intersection numbers 
#(ci, £2), #(ci, I2), £2) are defined and satisfy 

(16) #(£i,£2) = #(£l,/2) = #(^l,/2). 



^See, e. g., (HI], Chapter 5. 
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#(/i,/2) = sgn(/ii ■ /12). 



Since ci,C2 are minimal geodesies, they intersect exactly once, and 
transversely, at the point Ci(ti) = 52(^2)- Hence 



Corollary 8.2. Let /ii,/i2 be prime elements in the lattice of integer 
classes in Hi(T^, M) . Let ci, C2 : M ^ be minimal periodic geodesies 
in the classes hi, h2 respectively. Suppose that /ii ■ /12 7^ 0. Then 



Proof. Denote by Lj the minimal period of q. Since ci and C2 intersect 
transversely, we have 



where the sum is over all pairs (^1,^2) G [0,-^^i) x [0,L2) such that 
ci(ti) = £2(^2)- By Lemma [8A] 

(19) |/ii-/i2| =card{(ti,t2) G [0,Li) X [0,L2) : Ci(ti) = 02(^2)}- 

Since /ii,/i2 G ifi(T^,M) are prime, the curves Ci : [0,Li) and 
C2 : [0, L2) are injective. Hence, for every p G Ci(]R) fl C2(M) there 

is exactly one pair (^1,^2) ^ [0,i^i) x [0,-^2) such that p = Ci(ti) = 
02(^2)- Now our claim follows directly from equation (fTOjl . ■ 

We will investigate riemannian metrics on the two-torus. We denote 
by Qi, Q2 the sets of riemannian metrics on satisfying the conditions 
Gi,G2 respectively: 

(Gi) There exists a homology class h G Hi{T^, R) \ {0} such that 
does not admit a foliation by homotopically minimal geodesies 
with the homological direction [h]; 

{G2) There exist integral homology classes hi,h2 G ifi(T^,M) such 
that hi ■ h2 = 1 and for each 2 = 1,2 there is a unique minimal 
periodic geodesic in the class hi. 

We will now show that for g & Gi ^ G2 any point pair in (T^,g) is 
insecure. 




card{ci(R) n C2(M)) = \hi ■ h2 




(tl,t2) 
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Theorem 8.3. Let (T'^,g) be a riemannian torus. If the metric g 
satisfies conditions (Gi) and {G2), then every pair of points in {T'^,g) 
is insecure. 

Proof. Suppose the claim is false, and let {p, q) be a secure pair of 
points in our torus. Let /ii,/i2 G Hi{T'^,M) be as in condition (G2); 
we denote by ci G hi, 02 G /12 the unique minimal periodic geodesies 
in these classes. Then Zi = \ Cj(M) are admissible cylinders. By 
Theorem 16.21 both points p,q belong to the sets Ci(M),C2(M). Thus, 
{p,q} C Ci(M)nc2(M). 

By Corollary 18.21 the geodesies Ci,C2 intersect at a unique point. 
Thus p = q, and {p} = Ci(M) fl C2(ffi). We will now study the geodesies 
in {T'^,g) passing through p. 

In view of Theorem 16.21 we know that for any free homotopy class 
of prime periodic geodesies, there exists a minimal geodesic in this 
class passing through p. Taking limits of these geodesies, we conclude 
that for every h G iJi(T^,M) \ {0} there exists a homotopically mini- 
mal geodesic with the homological direction [h] passing through p. By 
Theorem 6.7 and Theorem 6.9 in |Balj . this geodesic is uniquely de- 
termined by [h]. We denote it by c([/i]). Let f/T^ C be the set of 
unit tangent vectors at p. Let G UTp be the tangent vector at 

p to the geodesic c([/i]). This defines a map 

$ : {Hi{T^,R) \ {0})/M+ ^ UT^. 

By Theorem VII in |He] , or by Remark (2) on page 32 in [Bal] . there 
is a uniform bound on the widths of the strips in containing lifts of 
homotopically minimal geodesies. It follows that the map $ is continu- 
ous. Since it is also injective, we conclude that $ is a homeomorphism. 
Therefore, every geodesic in (T^, g) passing through p is homotopically 
minimal. 

We have shown that p is a pole for the riemannian torus (T^, g). This 
means that any geodesic passing through p has no points conjugate to 
p. Now we use the following result of |Ba4] : If {T^,g) has a pole, 
then for every [h] G (iJi(T^,]R) \ {0})/M+ the torus admits a foliation 
by minimal geodesies with the homological direction [h]. Thus, the 
riemannian torus {T'^,g) does not satisfies condition (Gi). We have 
arrived at a contradiction. ■ 

We have shown that for riemannian tori {T'^,g), where g & Qi Cl 
Q2, every pair of points is insecure. Recall that a closed geodesic 7 
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is nondegenerate if the linearized Poincare map for 7 does not have 
eigenvalue 1. 

Let C Q2 be the set of tori (T^, g) satisfying the following strength- 
ening of condition (G'2): 
(G3) There exist integral homology classes /ii,/i2 ^ Hi(T^,M.) such 
that hi ■ h2 = 1 and there is a unique minimal periodic geo- 
desic in the class hi, i = 1,2. Moreover, these geodesies are 
nondegenerate. 

Proposition 8.4. The set Qi fl of riemannian metrics on the two- 
torus satisfying conditions (Gi) and (G3) is C^-open and C°°-dense in 
the space of riemannian metrics. 

Our proof of Proposition 18.41 is based on the following two lemmas. 

Lemma 8.5. The set Qi of metrics on the two-torus satisfying condi- 
tion (Gi) is C^-open and C°°-dense. 

Proof. Let h G Hi{T^, M)\{0} be an integral class. Denote by Qi{h) the 
set of metrics that do not admit a foliation by homotopically minimal 
geodesies with homological direction [h]. We will prove first that Qi{h) 
is C°°-dense. Since Gi{h) C Qi, this will prove that Qi is C°°-dense. 

Let g he a. metric in the complement Gi{hY of Gi{h), i. e., there 
exists a foliation of by homotopically minimal geodesies (with 
respect to g) of homological direction [h]. Then JF has the following 
structure: i) The torus contains a nonempty closed subset foliated by 
periodic geodesies in JF; ii) The complement to this set is either empty 
or it is a disjoint union of admissible cylinders foliated by geodesies in 
JF that are heteroclinic to the boundary geodesies of the cylinder. See, 
e. g., |Balj . Theorem 6.6 and Theorem 6.7. 

We will now show that if not all of is foliated by periodic geodesies 
in .F, then g can be C°°-approximated by a sequence in Qi{h). Let 
Z G T"^ he an admissible cylinder foliated by heteroclinic geodesies in 
JF. We choose two minimal heteroclinic geodesies C- : M. ^ Z and 
c+ : M. ^ Z , one for each of the two possibilities; see Lemma [531 Then 
U = Z \ (c_(M) U c+(M)) is a nonempty open subset of Z. We choose 
p E U and a sequence g^ of riemannian metrics such that a) gk > g, 
b) gk\p > g\p, and c) gkW'^xu = gW'^xu- It follows that each of the tori 
(T^, gk) has neither a heteroclinic nor a periodic homotopically minimal 
geodesic with homological direction [h] passing through p. Hence gk G 
Gi{h) for all G N. This proves that Gi{h) is C°°-dense in the set of 
all metrics on that do not admit a foliation by periodic minimal 
geodesies of direction [h]. 
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It remains to prove that every metric that admits such a fohation 
can be C°°-approximated by metrics that do not admit such a fohation. 
This can be shown by a perturbation argument, which is similar, but 
simpler, than the argument in the first part of the proof. 

To prove that Qi is open in the C^-topology, it suffices to show that 
Giihy is C^.closed for every h e Hi{T'^,R) \ {0}. This fact is closely 
related to the convergence properties for invariant circles of monotone 
twist maps. For the benefit of the reader, we will outline a proof. 

Let Qi e Gi{hY be an infinite sequence such that Qi g in the C^- 
topology. Let jFj, i = 1, 2, . . . , be the corresponding foliations of T^. 
Denote by Ui the vector field formed by the unit tangent vectors on 
(T^, gi) tangent to the foliation jFj. Then the sequence Ui is equicon- 
tinuous, since the vector fields Ui are uniformly lipschitz. See jSo] or 
[Mat]. By the Arzela-Ascoli theorem, there is a subsequence of vector 
fields Ui that converges to a (^-unit tangent vector field U. The integral 
curves of U form a foliation JF of {T'^,g) by homotopically (jf-minimal 
geodesies. The widths of the parallel strips containing the lifts of the 
geodesies in the foliations jFj to can be chosen uniformly bounded. 
See, e. g., the proof of Remark (2) on p. 32 in [Balj ,^ It follows that 
the geodesies in have homological direction [h]. Hence, g G Qi{hy. 



Lemma 8.6. The set of riemannian metrics on the two-torus sat- 
isfying condition (G3) is C'^-open and C°° -dense. 

Proof. First, we will show that ^3 is C^-open. Suppose that g satisfies 
condition (G3) for integer classes hi,h2 G ifi(T^,M) with hi ■ h2 = 1. 
Let ci,C2 be the unique (7-minimal periodic geodesies in the classes 
hi, h2 respectively. Let g^, k > 1, he a sequence of riemannian metrics 
on converging to g in the C^-topology. We will show that all but a 
finite number of the metrics g^ satisfy condition (G^) with the classes 
hi,h2. 

Suppose first that an infinite subset of these metrics has several min- 
imal periodic geodesies in one of the homology classes, say hi. Re- 
labelling the indices, we obtain a sequence of riemannian metrics gk 
converging to g and such that there exist distinct (yf^-minimal periodic 
geodesies c'^ and c'^ in the class hi. They are distinct in the sense 
that c'i^{M.) 7^ c';,'(M). With an appropriate reparameterization, both 
sequences of geodesies converge to the (yf-minimal geodesic ci. By the 

^Alternatively, we can use the order of the W? -translates of such lifts to determine 
the direction. See, e. g., [We| or |Ba3| . 
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implicit function theorem, the hnearized Poincare map for c has an 
eigenvalue 1, contrary to our assumption. 

Deleting a finite number of indices, we assume without loss of gen- 
erality that for all A; G N the metrics Qk have unique minimal periodic 
geodesies ci!'\cf^ in the classes /ii,/i2 respectively. We claim that for 
all but a finite number of indices the geodesies cj!'\ cf^ are nondegener- 

ate. We may assume that we have the convergence cj!^^ — > ci, c^^^ —>■ C2- 
Since the geodesic flows of {T'^,gi) converge in the C^-topology to the 
geodesic flow of (T'^,g), and the limit geodesies are nondegenerate, we 
obtain the claim. 

We have shown that Qs is C^-open. We will now prove that is 
C°°-dense. Let g be any C°° metric on the torus. Let hi,h2 be any 
integer homology classes such that hi ■ h2 = 1. Let ci E hi,C2 E /i2 be 
(yf-minimal periodic geodesies. 

Let / be a nonnegative C°° function on satisfying the following 
conditions: 

a) We have /-^(O) = ci(R) U C2(M); 

b) For i = 1,2 there exists a unit tangent vector Vi for the torus 
{T'^,g) with base point in Cj(M) which is normal to Cj(M) and 
such that (/o7)"(0) > for every curve 7 in with 7(0) = Vi 
or 7(0) = V2. 

See figure [61 Let A > 0. We define the riemannian torus {T'^,gx) by 
gx = {1 + Xf)g. By condition a), the curves q : M — are the unique 
(yfA-niinimal periodic geodesies in the classes hi,i = 1,2. We claim that 
for all A > the ^f^-geodesics Ci, C2 are nondegenerate. 

Assume the opposite, i. e., that for some A > one of them, say ci, 
is a degenerate (^A-geodesic. Then there exists a nontrivial, periodic, 
normal (^A-Jacobi field Y along ci. Let exp;^ be the exponential map of 
gx. For r G M denote by arit) = exp^{TY{t)) the normal variation of 
Ci induced by Y. Let Lx denote the length with respect to gx', let L be 
the length with respect to g. The formula for the second variation of 
arc-length|l implies 

(20) ^Lxiar)\r=o = 0. 

On the other hand, since the Jacobi field Y has only isolated zeros, 
condition b) implies that for a nonempty open interval of values of t 



^See, for instance, [GKMj . page 122, for the second variation of arclength 
formula. 



28 



VICTOR BANGERT AND EUGENE GUTKIN 




we have 

(21) ^/(exp,(rr(t)))|.=o>0. 
Since Ci is a ^f-minimal periodic geodesic, we have 

(22) ilLK)|,=o>0. 
Differentiating the expression 

(23) Lxiar) = / [(l + A/(exp;,(rF(t))))(7(«.(t),«.(t))]^rft 

Jo 

and using equations (PT]) and ([22D, we obtain 

—Lx{ar)\r=o > 0. 

This contradicts equation (120|) . and hence proves our claim. Thus, 
fi'A £ for all A > 0. By construction, (T'^,gx) converges to (T'^,g) as 
A ^ 0. Since g is an arbitrary metric, this completes the proof. ■ 

Proof of Proposition \8.4\ We recall that Qi (resp. Q^) is the set of 
riemannian tori (T^,g) satisfying condition (Gi) (resp. (G3)). By 
Lemmas 18.51 and 18. 6[ Qi and are C^-open, hence the set Qi fl Q3 is 
C^-open as well. 
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By Lemmas 18.51 and 18.61 the sets Qi and are C°°-dense. Since 
the C°°-topology is stronger than the C^-topology, Qi and Q3 are also 
C°°-open. The intersection of two open and dense sets is open and 
dense. Thus, the set Qi fl is C°°-dense. ■ 

Theorem 18.31 and Proposition 18.41 immediately imply the following. 

Corollary 8.7. The set of riemannian tori {T'^,g) contains a C'^-open 
and C°°-dense subset of totally insecure tori. 

Proof. Set Qtot = Gi ^ Q?,- By Proposition 18.41 Qx.ot is a C^-open and 
C°°-dense subset of the set of riemannian tori. By Theorem 18. 3[ for 
9 £ Qtot^ every pair of points in (T'^,g) is insecure. ■ 

9. Total insecurity for surfaces of genus greater than 

ONE 

In this section we will prove that on every closed riemannian surface 
M of genus greater than one every point pair is insecure. Replacing M 
by a two-sheeted covering space, if necessary, we can assume without 
loss of generality that M is oriented. The basic idea is simple and has 
already been used to prove the total insecurity of admissible cylinders. 
See Theorem 16. 2[ 

Besides the given metric g on M, we consider a "background metric" 
go of curvature —1 on M. Then the universal riemannian covering of 
(M, go) can be identified with the open unit disc D C C with the 
standard hyperbolic metric; thus, we have a covering n : D —>■ M such 
that go = 7r*go is the standard hyperbolic metric. We will say that the 
geodesies, distances, etc, with respect to go or ^0 are the hyperbolic 
geodesies, distances, etc. Note that go and the lifted metric g = 7T*g 
are lipshitz equivalent. 

The proof of Theorem 19.71 which is the main result in this section, 
crucially uses fundamental facts due to M. Morse [Moj . For convenience 
of the reader, we give their complete statements below. 

Theorem 19.11 invokes the standard notion of the Hausdorff distance 
between subsets of a metric space. We do not specify the metric in 
the statement of the theorem because lipschitz equivalent metrics yield 
equivalent Hausdorff distances. By a geodesic segment we will mean 
the trace of a geodesic, when the endpoints are specified. 

Theorem 9.1. ( \Mo\ . Lemma 8). There is a positive constant R such 
that the Hausdorff distance between any g-minimal geodesic segment 
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and the hyperbolic geodesic segment with the same endpoints is less 
than R. 

In view of Theorem I9.H every ^-minimal geodesic c : M — > D is 
a uniformly bounded distance away from some hyperbolic geodesic. 
Therefore, there are distinct points c(— cxd), c(oo) G dD such that we 
have lim c(t) = c(±oo)j^ The statement below directly follows from 

the fact that complete minimal geodesies intersect at most once. 

Theorem 9.2. / ]Mo] . Theorem 4). Let ci : R ^ D and cs : M ^ 

D be g-minimal geodesies. // C2(— oo) and 02(0x3) belong to the same 
component of dD \ {ci(— 00), ci(oo)} then the geodesies c\ and 02 do 
not intersect. 

Our next statement directly follows from Theorem 19. 2[ 

Theorem 9.3. Let c : M/LZ M be a periodic geodesic of minimal 
g-length in its free homotopy class. If this class contains a simple closed 
curve, then the mapping c : [0, L) ^ M is one-to-one. 

Theorem 9.4. / ]Mo] . Theorem 11). Let z^w ^ dD be distinct points. 

1. Suppose that there is more than one g-minimal geodesic c : M ^ -D 
with c(— 00) = z and c(oo) = w. Then there exist two g-minimal 
geodesies c± : M ^ D satisfying 

c±(— 00) = z, c±{oo) = w 

such that their traces bound a closed strip 5* C -D, 5 ~ M x [0, 1], 
containing every g-minimal geodesic with endpoints z and w. 

2. Suppose, in addition, that z and w are the endpoints of a lift of 
a closed curve in M. Let a be the free homotopy class of this curve. 
Then c_ and c+ project to periodic geodesies of minimal g-length in the 
class a. 

Let a be a nontrivial free homotopy class of closed curves in M 
that contains a simple closed curve. We will construct a ^-convex set 
E (1 D. In our proof of Theorem 19.71 the set E will be a counterpart 
of the strip C in the proof of Theorem 16.21 on the insecurity of 
nonflat tori. There are two cases to consider. 

Case (i): There is a unique periodic geodesic, say c_|_, of minimal g- 
length in the homotopy class a. We denote hj Za C M the trace of 
c+. 



'The limits are with respect to the canonical topology on C. 
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Figure 7. Case (i) : there is a unique closed geodesic 
of minimal length in the homotopy class a. 

Case (ii): There are at least two periodic geodesies of minimal (yf-length 
in the class a. It follows from Theorem 19.31 and Theorem 19.41 that 
there exist two such geodesies bounding a closed cylinder C M that 
contains every periodic geodesic of minimal (7- length in the class a. We 
denote these geodesies by c+ and c_, so that is to the left of c_. 
Figure [7] and figure [H] illustrate the cases (i) and (ii) respectively. In 
particular, Z^ — in case (i) and Za — x [0, 1] in case (ii). 

We choose a lift, say c^, of c+ to D. Now we define E to be the 
connected component of -D \ 7r~^{Za) whose boundary contains c_|_ and 
which lies to the left of c+. Note that the latter condition is automat- 
ically satisfied in case (ii). See figure [9] and figure [TO] for illustration. 

Lemma 9.5. The set E has the following properties: 

a) If x,y E E then every g-minimal geodesic from x to y is con- 
tained in E. 

b) Let a denote the covering transformation for tt : D ^ M map- 
ping c+(0) to c+(L(c+)). Then a{E) = E. 

c) Suppose, in addition, that a is homologically nontrivial. Then 
tt{E) = M\Z^. 

Proof, a) Assume the opposite. Let c : [0, L] ^ D he a. ^-minimal 
geodesic from x to y intersecting dE. Let to ^ (0, L) be the first time 
that c intersects dE. Then there exists a lift c : M — >■ D of c+ or c_ 
such that c(to) e c(M) and c([0,to)) C E. 



32 



VICTOR BANGERT AND EUGENE GUTKIN 




Figure 9. The region E in the case when there is a 
unique closed geodesic of minimal length in the homo- 
topy class a. 
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Figure 10. The region E in the case when there are 
at least two closed geodesies of minimal length in the 
homotopy class a. 



Since c(]R) disconnects D and since the geodesies c and c intersect 
transversely, there exists ti G (tQ,L) such that c(ti) G c(M). By Theo- 
rem 12.31 the geodesic c is ^-minimal. Hence, the ^-minimal geodesic c 
intersects c at most once. 

b) Since a is a deck transformation, it preserves any set of the form 
7i~^{X), X C M. In particular, a (7r~^ {Za)) = 7i~^{Za). Besides, by 
our choice of a, we have a(c+(M)) = c+(M). Since a preserves the 
orientation, the claim follows. 

c) Let p G M \ Zq, be an arbitrary point. The homology class of a 
is nontrivial if and only if the set M \ is connected. Therefore, 
there is a regular C^-path 7 : [0, 1] — >• M such that 7(0) = c+(0), 
7((0, 1)) C M \ Za, 7(1) = p and the pair (c+(0),7(0)) is positively 
oriented. 



34 



VICTOR BANGERT AND EUGENE GUTKIN 



Let 7 : [0, 1] — > D be the lift of 7 to D starting at c+(0). Then 
7((0, 1]) C E, and hence 7(1) G E. Since 7r(7(l)) = p, the claim 
follows. ■ 



In the following lemma we crucially use that the genus of M is greater 
than one. 

Lemma 9.6. For every pair {p,q) & M x M there exists a free homo- 
topy class a of closed curves in M with the following properties: 

a) The class a is homologically nontrivial and contains a simple 
closed curve; 

b) We have {p, q} C M \ Z^. 

Proof. Since the genus of M is at least two, there exist free homotopy 
classes of closed curves in M, say ai,a2,«3, that satisfy condition a) 
and have pairwise disjoint representatives. Moreover, we can assume 
that the homology classes of ai,a2,a3 are pairwise linearly indepen- 
dent. See figure [m 

Let Zaj^, Za2 and Za^ be the corresponding subsets of M. See the 
discussion following Theorem 19. 4[ It follows from Theorem 19.21 that the 
sets Za2 and Z^^ are pairwise disjoint. Therefore at least one of 
the classes ai, 012, satisfies condition b). ■ 

We will now prove the main result of this section. 

Theorem 9.7. Every closed riemannian surface M of genus greater 
than one is totally insecure. 

Proof. Let {p,q) E M x M be an arbitrary pair of points. We choose 
a free homotopy class a according to Lemma 19. 6| let C -D be as in 
Lemma 19. 5[ By claim c) of Lemma 19.51 there exist points x,y E E 
such that 7r(x) = p, 7T{y) = q. Let a : D ^ D he the covering 
transformation from Lemma [9.51 b). For n G Z we set ?/„ = 

By claim b) of Lemma 19.51 ?/„ G -E for all n G Z. For every positive 
integer n let c„, : [0, L„] ^ D he a. ^-minimal geodesic from x to ?/„,. 
By claim a) of Lemma 19.51 all curves c„([0,L„]) are contained in E. 
We will show that the projections Cn = n o Cn : [0, L„] — ^ M satisfy 
conditions a)-d) of Proposition 16. ![ if we set A = Z^- 

Let ■)) be the distance in D corresponding to the metric g. Since 
lim d{x,yn) = 00, we have limL„ = 00, i. e. condition a) of Proposi- 

n— >oo 

tion 16.11 is satisfied. The curves Cn([0,L„]) are contained in E and, by 
claim c) of Lemma 19. 5[ tt{E) G M\A; hence condition b) holds. Since 
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the geodesies c„ are (7-minimal, the geodesic segments c„([0,L„)) have 
no conjugate points, which verifies condition c). 

Suppose now that condition d) of Proposition 16.11 is not fulfilled. 
Then there is e > 0, such that for all G N there is an integer rik > 
and a number G [k, Ln^. — k] such that 

(24) d{cn,{tk),54R))>e. 

Observe that c?(c„,(L„), c+(]R)) = (i(y,c+(]R)) < 00. Theorem 19.11 and 
standard facts from hyperbolic geometry imply that there exists a con- 
stant R such that for all n G N and all t G [0, L„,] we have 

(25) d{dn{t),c+{R)) <R. 




Figure 11. Illustration to the proof of Lemma [9. 6[ 



The group {a" : n G Z} acts cocompactly on the set {2 G -D : 
d{z,c+(M.)) < R}. Therefore, there is a sequence rrik such that the 
sequence of geodesies 

t ^ a""" o dn.itk + t) 

converges to a ^-minimal geodesic c : M — > -E. 

By equation (125|) . the geodesic c satisfies d{c{t) , c^{M.)) < R for all 
i G M; hence 

(26) {c(oo), c(-oo)} = {c+(oo), c+(-oo)}. 

Equation fl2B]) and Theorem 19.41 imply that the trace of c is either 
equal to the trace of c+ (in Case (i)) or is contained in the closed strip S 
bounded by the traces of c+ and c_ (in Case (ii)). Since c(M) C E, we 
conclude that c = c+, up to parameterization. On the other hand, since 
c(0) is the limit point of the sequence a™''-' o Cn^itk), by equation (12^ . 
we have (i(c(0)), c+(M)) > e > 0, a contradiction. 

We have shown that condition d) of Proposition [6lT] also holds. Thus, 
Proposition 16.11 applies and establishes the claim. ■ 
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